-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat Virtualization Host security and bug fix update [ovirt-4.4.9] 0-day Advisory ID: RHSA-2021:4750-01 Product: Red Hat Virtualization Advisory URL: https://access.redhat.com/errata/RHSA-2021:4750 Issue date: 2021-11-19 CVE Names: CVE-2020-16135 CVE-2021-0512 CVE-2021-3620 CVE-2021-43267 ===================================================================== 1. Summary: An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: RHEL 8-based RHEV-H for RHEV 4 (build requirements) - noarch, x86_64 Red Hat Virtualization 4 Hypervisor for RHEL 8 - x86_64 3. Description: The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. Security Fix(es): * kernel: out-of-bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers() of hid-input.c (CVE-2021-0512) * Ansible: ansible-connection module discloses sensitive info in traceback error message (CVE-2021-3620) * kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type (CVE-2021-43267) * libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL (CVE-2020-16135) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Red Hat Virtualization Host now includes packages from Red Hat Enterprise Linux 8.5. (BZ#1958101) * Red Hat Virtualization Host now includes packages from RHGS-3.5.z on RHEL-8 Batch #5. (BZ#1975175) * Red Hat Virtualization Host now includes the packages needed for using Managed Block Devices via cinderlib. (BZ#1983021) * Red Hat Virtualization Host now includes openvswitch related packages from Fast Data Path 21.G release. (BZ#1998104) * Previously it was not possible to upgrade RHVH to version 4.4.8 when custom VDSM hooks were installed on RHVH. This was caused by the VDSM hooks dependency on the concrete version of VDSM. The current release allows users to maintain the VDSM dependency manually. In other words, if you want to upgrade from VDSM X.Y.Z to version A.B.C, you must upgrade all VDSM hooks to the same A.B.C version. (BZ#2004469) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891 5. Bugs fixed (https://bugzilla.redhat.com/): 1862456 - CVE-2020-16135 libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL 1953685 - The RHVH iso should not always remove the /root/anaconda-ks.cfg file. 1958101 - Rebase RHV-H 4.4.9 on RHEL 8.5 1974491 - CVE-2021-0512 kernel: out-of-bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers() of hid-input.c 1975175 - Rebase RHV-H 4.4.9 on RHGS-3.5.z on RHEL-8 Batch #5 1975767 - CVE-2021-3620 Ansible: ansible-connection module discloses sensitive info in traceback error message 1983021 - [cinderlib] Provide cinderlib prerequisites in RHV-H 1998104 - Rebase RHV-H on FDP 21.G 2004469 - [RHV 4.4.8] Unable to upgrade RHVH if vdsm-hook-ethtool-options is installed 2020362 - CVE-2021-43267 kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type 2024360 - RHV-H sssd-proxy installation fails due to higher versioned packages of sssd-* in repository then RHV 4.4.8 uses. 6. Package List: Red Hat Virtualization 4 Hypervisor for RHEL 8: Source: redhat-virtualization-host-4.4.9-202111172338_8.5.src.rpm x86_64: redhat-virtualization-host-image-update-4.4.9-202111172338_8.5.x86_64.rpm RHEL 8-based RHEV-H for RHEV 4 (build requirements): Source: redhat-release-virtualization-host-4.4.9-2.el8ev.src.rpm noarch: redhat-virtualization-host-image-update-placeholder-4.4.9-2.el8ev.noarch.rpm x86_64: redhat-release-virtualization-host-4.4.9-2.el8ev.x86_64.rpm redhat-release-virtualization-host-content-4.4.9-2.el8ev.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-16135 https://access.redhat.com/security/cve/CVE-2021-0512 https://access.redhat.com/security/cve/CVE-2021-3620 https://access.redhat.com/security/cve/CVE-2021-43267 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYZgL4tzjgjWX9erEAQjsNBAAiRBRvYPe7W4Qj9qffoUigCm0ZC2whb9y mY5AsAf0Q/2x6qR1LHHiIeK21U6Ob380C4+h7VkTUo/76fhthQAAZRaYeJ821SnK R1DRnUK5QxuridK7dUdcW8iRhq3q87KnPhK0WNsgMdevQB2O+xEK+qCUl3HgyGdy 6ikmyE/cCCk+FPdaRUSQgskCBv8OY2ton5e/VTby2VkxtRS40mCeg73wWkVVO64k vKStoUBdypyD9sZ7RlagCDLzK6fNGlHH5gom5Y9UsmfhXWtaIvLfkKGFryJfHOAe SrhpA48Kjs6UGJ95ravF5V8SpSGCzhEbl/vlFJJoceOhzGV8Wwa/cPWmLQJsaWoJ /Eg17zAy0YIDQcKIfhg86n3nesZuHNlfi8qylULv7NgfI/OnQKD8Q3qCMdU+dVtF l2M+P8nxDadSKyYTjmzAv64XISOWJAEGDGcPNZ0yRAxSPwPHaoArM8xjFNv9yQbw sNGMMxFqHlNt3ZmIhN0GkXzP43oXCM3cXEVAnqkCaHD0XFTYfHg2JRQOI0xKNh/y MYLtoJF/q3P5qL72RciKZMPkg3zUTmA0wMbUVcWdOKs21CIbEGwOuW/ZPK+4Ot9H 3NkZsbUz6IAPk0KXQB3+ApbIw4fvR2w+ADvBXWOapCR1uLiT6MYQqshAPNRvCOJY CJaoIac5aII= =VWWF -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce